To avoid bots signing up to the service, we could do the following: * Add a CAPTCHA to the signup form * Enforce verification by email before allowing users to log in